Vulnerability in Samsung Dex
CVE-2024-20802
Improper access control vulnerability in Samsung DeX prior to SMR Jan-2024 Release 1 allows owner to access other users' notification in a multi-user environment.
EPSS: 0.002 (5.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.6 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Samsung Dex
- Samsung Mobile Devices — versions SMR Jan-2024 Release in Selected Android 13 devices
References
- mobile.security@samsung.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2024-20802?
- CVE-2024-20802 is a medium-severity vulnerability in Samsung Dex, classified under CWE-284: IMPROPER ACCESS CONTROL. CVSS score: 4.6/10. Published 2024-01-04.
- How severe is CVE-2024-20802?
- Medium severity. CVSS v3 base score is 4.6 out of 10.